[thelist] Advisablitity of SSI

Maisha Walker maisha at e-vent.org
Fri Sep 19 18:31:53 CDT 2003


Thank you, Hassan - yes that does help!

Finding good, reliable information is always easier when you already know
what the good information looks like.  :o)

Thanks again, I'll check out that link!

Maisha

----- Original Message -----
From: "Hassan Schroeder" <hassan at webtuitive.com>
To: <thelist at lists.evolt.org>
Sent: Friday, September 19, 2003 6:07 PM
Subject: Re: [thelist] Advisablitity of SSI


Maisha Walker wrote:

> I've also heard rumors about security problems with SSI - anyone have any
> thoughts refuting or validating this concern?

Thoughts? Yes -- "Google is your friend" :-)

The first hit from `SSI security Apache` is this pretty decent look
at the issues:

<http://www.linuxsecurity.com/feature_stories/feature_story-129.html>

:: which are primarily internal -- `exploits` require a perpetrator
to access the system somehow and install the malicious (S)HTML file.

HTH!
--
Hassan Schroeder ----------------------------- hassan at webtuitive.com
Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com

                           dream.  code.



--
* * Please support the community that supports you.  * *
http://evolt.org/help_support_evolt/

For unsubscribe and other options, including the Tip Harvester
and archives of thelist go to: http://lists.evolt.org
Workers of the Web, evolt !




More information about the thelist mailing list